Information Security & Risk Manager

Description

Help protect the technology behind Diraq's quantum computers.
Diraq is building the world's first scalable quantum computers using silicon quantum dot technology. We are looking for an Information Security & Risk Manager to protect the technology, research, source code and controlled information behind that work.
You will define how security is built into the way we design systems, build software, protect research environments, manage access and work with partners across Australia and the United States.
You will own Diraq's Information Security Management System, establish security standards and governance frameworks, and work closely with Engineering, IT & Security, Legal, Export Controls and operational leaders to build the security foundations Diraq needs as it scales.

Requirements

You will bring strong experience in information security, security governance, technology risk or assurance. You will be comfortable working with technical teams and translating risk into practical security requirements that can be implemented in real environments. Ideally you have come up through a hands-on IT or security function, running systems, infrastructure or security tooling yourself, so you know what it takes to implement the requirements you set.

• Experience with security frameworks such as ISO 27001, NIST or equivalent.
• Sound judgement about where to hold the line on security and where to be flexible.
• Practical, hands-on experience in an IT or security operations function, such as administering systems, networks, cloud platforms, identity or security tooling.
• Experience influencing technical and business stakeholders without relying on direct authority.
• Understanding of secure development, identity governance, least-privilege and third-party security risk.
• Experience with security assurance, control testing, business continuity or incident management governance.
• An interest in protecting critical technology, research environments, source code and sensitive technical information.
• High integrity, discretion and comfort working in environments involving sensitive information.

Experience in deep tech, defence, aerospace, semiconductor, quantum, government, R&D or other highly technical environments would be highly regarded. Familiarity with export-controlled technology environments, partner assurance or hybrid environments spanning cloud, SaaS, on-premises infrastructure and physical laboratory sites would also be valuable.
Relevant certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor are beneficial, but practical judgement and the ability to build usable security governance in a scaling environment are more important than certifications alone.